2022 Developer Survey is open! Take survey.

New answers tagged

0 votes

How to mitigate risk of exploiting open POST endpoints?

In general attacks on POST operations are: Memory exhaustion attacks. The attacker sends a big payload on the POST for exhaust internal buffers/memory that handles the data. (For example Slowloris). ...
user avatar
  • 1,932
2 votes
Accepted

Modifying request responses leading to unauthorized access?

This is a plain ol' run-of-the-mill Broken Access Control Bypassing access control checks by modifying the URL... This type of problem is #1 in OWASPs Top 10 list Solution: Authentication and access ...
user avatar
  • 123k
0 votes

Should I disable HTTP HEAD requests?

NMAP Uses HEAD Requests in Script: 'http-security-headers' A common technique in penetration testing is to confirm HSTS secure connections over HTTPS by using the NMAP command below, which uses HEAD ...
user avatar
0 votes

Validate HTTPS traffic at later time

TLSv1.3 explicitly prevents this kind of traffic analysis "at later time", i.e. without having the internal state of both sides. This is called "perfect forward secrecy" (PFS). In ...
user avatar
  • 3,395

Top 50 recent answers are included